$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/3aaedf09-7d2e-3e3b-8baa-1a6fc40df196.roa File: 3aaedf09-7d2e-3e3b-8baa-1a6fc40df196.roa (raw, json) Hash identifier: olv3cYdEzwulLPi7WaEGGRzONj2GKAWNdM6CAIUPfp8= Subject key identifier: 4B:81:00:AF:05:05:3E:B1:34:87:F4:A2:70:E3:F4:A0:25:81:6A:A3 Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F4328584DC56599D0422E38F33777CB20 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/3aaedf09-7d2e-3e3b-8baa-1a6fc40df196.roa Signing time: Sat 09 May 2026 01:00:25 +0000 ROA not before: Sat 09 May 2026 01:00:25 +0000 ROA not after: Fri 07 Aug 2026 01:00:25 +0000 asID: 3630 IP address blocks: 199.109.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c5:65:99:d0:42:2e:38:f3:37:77:cb:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: May 9 01:00:25 2026 GMT Not After : Aug 7 01:00:25 2026 GMT Subject: CN=583160e5-1ff0-44d7-b573-8bfb6002c38e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:96:32:f5:65:3c:32:e9:e4:fd:03:28:fe:b3: f7:0a:05:f5:5f:9f:4b:e4:0c:f9:f1:f5:3e:b7:9a: 7c:a7:ae:c9:cc:10:6c:f5:3b:ee:e7:e0:34:cd:0c: 5f:38:cc:a1:23:cb:85:4f:98:15:f8:06:54:ec:da: 49:11:52:34:cc:66:fa:91:1e:85:8d:63:e3:93:bc: cb:41:8b:26:fb:82:10:d4:14:0c:9e:e9:ec:aa:d9: 4a:38:dd:60:da:d1:b0:9f:fa:c6:b1:dc:e0:bd:22: 7f:17:cf:cd:17:62:bc:b5:19:09:44:8d:61:5e:8f: 05:31:dc:6e:03:47:b2:6c:24:7f:c4:0a:76:63:0b: fd:63:a4:83:6c:b8:41:da:bc:ce:6f:72:f9:ad:ed: b5:df:71:7d:7d:14:b8:13:1f:cf:8b:a9:e4:a1:27: 67:31:3a:6d:24:89:d5:e3:24:75:a1:de:c9:2b:c4: 1d:5a:20:ff:63:1c:0b:ca:83:3c:cb:15:97:12:01: 8e:67:fb:33:07:a1:df:5d:e1:fa:03:03:88:dd:22: b5:4f:1e:c3:58:33:9d:06:35:16:e2:9d:8d:c1:38: 6c:e4:5d:ce:a9:37:0e:5e:09:20:c9:e3:f6:14:60: a2:ae:1f:a6:cc:ca:22:51:a8:21:03:28:e9:e5:0f: d9:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:81:00:AF:05:05:3E:B1:34:87:F4:A2:70:E3:F4:A0:25:81:6A:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/3aaedf09-7d2e-3e3b-8baa-1a6fc40df196.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:2d:92:00:04:a8:c2:eb:ba:3d:3a:a2:4d:3a:4b:2f:22:d0: 61:f0:42:50:bc:83:c5:3a:6c:7f:86:0d:3f:d6:77:d2:28:04: 71:8a:9b:46:31:dd:14:0a:c1:70:6d:fb:fd:cf:f5:a2:b7:3f: bd:e8:2d:9d:b4:7c:b5:1b:d8:c6:0f:81:d4:5c:7f:ac:62:da: 77:6f:7b:46:60:93:a6:1a:8b:e0:6d:48:4a:03:56:b7:f0:8c: d0:00:5b:b1:80:3f:35:a4:74:32:fc:7d:78:03:38:b8:ef:bb: 2e:ce:ae:8b:66:ec:22:dd:c3:ce:5f:a7:bc:b6:8e:49:e9:9e: 55:39:53:90:79:2c:ba:77:9a:85:b2:5a:91:31:5f:aa:13:16: 7c:69:21:1d:b5:ad:10:92:ff:80:b2:b1:cd:a5:a4:95:a0:28: a8:6d:85:05:59:26:12:95:15:e4:20:75:44:e0:11:96:2e:1e: d5:3f:1a:17:b8:b3:5f:0a:5a:29:68:9f:f3:88:90:f8:7a:45: f1:22:57:7a:d7:ca:b1:8f:1f:0c:ce:81:79:84:72:03:29:f4: 4a:22:51:16:1a:e1:8e:a3:86:b3:ea:b5:4c:e5:6e:3b:fd:1b: 09:46:3c:7a:c0:2f:0d:b4:5b:d2:72:46:85:ae:dc:04:e0:b0: 6a:e3:d6:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3FZZnQQi448zd3yyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI2MDUwOTAxMDAyNVoXDTI2MDgwNzAxMDAyNVowLzEtMCsGA1UEAxMk NTgzMTYwZTUtMWZmMC00NGQ3LWI1NzMtOGJmYjYwMDJjMzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5Yy9WU8Munk/QMo/rP3CgX1X59L5Az58fU+ t5p8p67JzBBs9Tvu5+A0zQxfOMyhI8uFT5gV+AZU7NpJEVI0zGb6kR6FjWPjk7zL QYsm+4IQ1BQMnunsqtlKON1g2tGwn/rGsdzgvSJ/F8/NF2K8tRkJRI1hXo8FMdxu A0eybCR/xAp2Ywv9Y6SDbLhB2rzOb3L5re2133F9fRS4Ex/Pi6nkoSdnMTptJInV 4yR1od7JK8QdWiD/YxwLyoM8yxWXEgGOZ/szB6HfXeH6AwOI3SK1Tx7DWDOdBjUW 4p2NwThs5F3OqTcOXgkgyeP2FGCirh+mzMoiUaghAyjp5Q/Z2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEuBAK8FBT6xNIf0onDj9KAlgWqjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvM2FhZWRmMDktN2QyZS0z ZTNiLThiYWEtMWE2ZmM0MGRmMTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx21eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUtkgAEqMLruj06ok06Sy8i0GHwQlC8g8U6bH+GDT/Wd9IoBHGKm0Yx 3RQKwXBt+/3P9aK3P73oLZ20fLUb2MYPgdRcf6xi2ndve0Zgk6Yai+BtSEoDVrfw jNAAW7GAPzWkdDL8fXgDOLjvuy7Orotm7CLdw85fp7y2jknpnlU5U5B5LLp3moWy WpExX6oTFnxpIR21rRCS/4Cysc2lpJWgKKhthQVZJhKVFeQgdUTgEZYuHtU/Ghe4 s18KWilon/OIkPh6RfEiV3rXyrGPHwzOgXmEcgMp9EoiURYa4Y6jhrPqtUzlbjv9 GwlGPHrALw20W9JyRoWu3ATgsGrj1kQ= -----END CERTIFICATE-----Generated at Wed May 13 07:22:33 2026 by rpki-client